Senior Information Security Analyst - Vulnerability Management

Our client, a global leader in software development, is seeking a highly motivated Senior Information Security Analyst specializing in Vulnerability Management. This role is crucial for proactively identifying, assessing, and remediating security vulnerabilities across the company's extensive IT infrastructure and applications. You will be responsible for managing the vulnerability scanning program, prioritizing vulnerabilities based on risk, and collaborating with IT teams to ensure timely remediation.

This position is a fully remote opportunity, offering the flexibility to work from anywhere within South Africa. The ideal candidate is detail-oriented, possesses strong analytical skills, and has a comprehensive understanding of security risks and mitigation strategies. This role contributes directly to strengthening our client's security posture and protecting sensitive data from potential breaches. While the role is remote, it operates in close coordination with the strategic direction and operational framework associated with our client's presence in Pietermaritzburg, Kwa Zulu-Natal , ensuring alignment with organizational security goals.

• Manage and operate the enterprise vulnerability scanning program, including configuration, scheduling, and maintenance of scanning tools.
• Conduct comprehensive vulnerability assessments of networks, systems, applications, and cloud environments.
• Analyze scan results to identify and prioritize vulnerabilities based on potential impact and exploitability.
• Collaborate closely with IT operations, development, and system administration teams to drive the timely remediation of identified vulnerabilities.
• Develop and maintain vulnerability management policies, standards, and procedures.
• Track and report on the progress of vulnerability remediation efforts to management and relevant stakeholders.
• Stay informed about emerging threats, vulnerabilities, and new scanning techniques.
• Assist in the development and execution of penetration testing activities.
• Provide expert guidance on secure configuration practices and vulnerability mitigation strategies.
• Contribute to the enhancement of security tools and processes related to vulnerability management.
• Maintain accurate records of scan results, remediation activities, and compliance status.
• Participate in security incident response efforts as needed.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 4 years of experience in information security, with a significant focus on vulnerability management.
• Proven experience with enterprise vulnerability scanning tools (e.g., Qualys, Nessus, Rapid7 Nexpose).
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10), CVEs, and risk assessment methodologies.
• Experience in prioritizing vulnerabilities based on CVSS scoring and business context.
• Knowledge of network protocols, operating systems, and web application security.
• Familiarity with scripting languages (e.g., Python, Power Shell) for automation is advantageous.
• Excellent analytical, problem-solving, and organizational skills.
• Strong communication and collaboration skills, especially for remote teamwork.
• Ability to work independently, manage workload, and meet deadlines.
• Relevant security certifications such as CompTIA Security+, CEH, or specific vendor certifications are a plus.
• Must be legally authorized to work in South Africa and comfortable with remote work.

• Fully remote work arrangement with significant flexibility.
• Competitive salary package and potential for bonuses.
• Comprehensive medical and health insurance.
• Generous annual leave and paid time off.
• Budget for professional development, training, and certifications.
• Opportunity to work with cutting-edge vulnerability management technologies.
• Engaging and impactful role in safeguarding a global software company.
• Supportive and collaborative remote team environment.